1807 matches found
CVE-2025-67645 OpenEMR Vulnerable to Broken Access Control in Profile Edit Endpoint
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access control in the Profile Edit endpoint. An authenticated normal user can modify the request parameters pubpid / pid to reference another user’s recor...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005146)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005146 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error Ensure index in...
Azure Linux 3.0 Security Update: ppp (CVE-2015-3310)
The version of ppp installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2015-3310 advisory. - Buffer overflow in the rcmksid function in plugins/radius/util.c in Paul's PPP Package ppp 2.4.6 and earlier, wh...
Azure Linux 3.0 Security Update: kernel (CVE-2024-39486)
"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39486 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/drmfile: Fix pid refcounting race ,...
MiracleLinux 8 : unbound-1.7.3-15.el8 (AXSA:2021-2060:02)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2060:02 advisory. unbound: integer overflow in the regional allocator via regionalalloc CVE-2019-25032 unbound: integer overflow in sldnsstr2wirednamebuforigin can le...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004328)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004328 advisory. An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this issue has been...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001586)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001586 advisory. The time subsystem in the Linux kernel through 4.9.9, when CONFIGTIMERSTATS is enabled, allows local users to discover real PID values as distinguished from PID valu...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001297)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001297 advisory. An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000963)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000963 advisory. The scmcheckcreds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001229)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001229 advisory. A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003953)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003953 advisory. An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this issue has been...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000787)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000787 advisory. The netlinksendmsg function in net/netlink/afnetlink.c in the Linux kernel before 3.5.5 does not validate the dstpid field, which allows local users to have an...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002944)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002944 advisory. An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002402)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002402 advisory. Use-after-free vulnerability in the xacctaddtsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002701)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002701 advisory. A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty null write to this file can crash the...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002616)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002616 advisory. An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002383)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002383 advisory. The scmcheckcreds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002107)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002107 advisory. The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002000)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002000 advisory. The scmcheckcreds function in net/core/scm.c in the Linux kernel before 3.11 performs a capability check in an incorrect namespace, which allows local users to gain...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001980)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001980 advisory. Use-after-free vulnerability in the xacctaddtsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive...